@clear-capabilities/agentic-security-scanner 0.77.0 → 0.78.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (83) hide show
  1. package/bin/.agentic-security/findings.json +1907 -0
  2. package/bin/.agentic-security/last-scan.json +1907 -0
  3. package/bin/.agentic-security/last-scan.json.sig +1 -0
  4. package/bin/.agentic-security/scan-history.json +115 -0
  5. package/bin/.agentic-security/streak.json +20 -0
  6. package/bin/agentic-security.js +33 -2
  7. package/dist/178.index.js +1 -1
  8. package/dist/384.index.js +1 -1
  9. package/dist/637.index.js +1 -1
  10. package/dist/718.index.js +106 -0
  11. package/dist/824.index.js +126 -0
  12. package/dist/838.index.js +1 -1
  13. package/dist/agentic-security.mjs +32 -32
  14. package/dist/agentic-security.mjs.sha256 +1 -1
  15. package/package.json +3 -3
  16. package/src/.agentic-security/findings.json +82642 -0
  17. package/src/.agentic-security/last-scan.json +82642 -0
  18. package/src/.agentic-security/last-scan.json.sig +1 -0
  19. package/src/.agentic-security/scan-history.json +10054 -0
  20. package/src/.agentic-security/streak.json +21 -0
  21. package/src/dataflow/.agentic-security/findings.json +3515 -0
  22. package/src/dataflow/.agentic-security/last-scan.json +3515 -0
  23. package/src/dataflow/.agentic-security/last-scan.json.sig +1 -0
  24. package/src/dataflow/.agentic-security/scan-history.json +702 -0
  25. package/src/dataflow/.agentic-security/streak.json +22 -0
  26. package/src/dataflow/async-sequencing.js +16 -7
  27. package/src/dataflow/builtin-summaries.js +131 -0
  28. package/src/dataflow/catalog.js +107 -0
  29. package/src/dataflow/cross-repo.js +75 -1
  30. package/src/dataflow/engine.js +129 -0
  31. package/src/dataflow/implicit-flow.js +24 -6
  32. package/src/dataflow/stub-aware-filter.js +69 -11
  33. package/src/dataflow/summaries.js +28 -3
  34. package/src/engine-parallel.js +70 -0
  35. package/src/engine.js +165 -15
  36. package/src/ir/.agentic-security/findings.json +3777 -0
  37. package/src/ir/.agentic-security/last-scan.json +3777 -0
  38. package/src/ir/.agentic-security/last-scan.json.sig +1 -0
  39. package/src/ir/.agentic-security/scan-history.json +771 -0
  40. package/src/ir/.agentic-security/streak.json +21 -0
  41. package/src/ir/index.js +22 -1
  42. package/src/ir/parser-go.js +403 -0
  43. package/src/ir/parser-js.js +2 -0
  44. package/src/ir/parser-php.js +330 -0
  45. package/src/ir/parser-py.helper.py +137 -11
  46. package/src/ir/parser-rb.js +309 -0
  47. package/src/posture/.agentic-security/findings.json +51562 -0
  48. package/src/posture/.agentic-security/last-scan.json +51562 -0
  49. package/src/posture/.agentic-security/last-scan.json.sig +1 -0
  50. package/src/posture/.agentic-security/scan-history.json +650 -0
  51. package/src/posture/.agentic-security/streak.json +20 -0
  52. package/src/posture/calibration.js +14 -0
  53. package/src/posture/triage.js +13 -0
  54. package/src/report/.agentic-security/findings.json +80 -0
  55. package/src/report/.agentic-security/last-scan.json +80 -0
  56. package/src/report/.agentic-security/last-scan.json.sig +1 -0
  57. package/src/report/.agentic-security/scan-history.json +35 -0
  58. package/src/report/.agentic-security/streak.json +22 -0
  59. package/src/report/index.js +23 -2
  60. package/src/sast/.agentic-security/findings.json +5190 -0
  61. package/src/sast/.agentic-security/last-scan.json +5190 -0
  62. package/src/sast/.agentic-security/last-scan.json.sig +1 -0
  63. package/src/sast/.agentic-security/scan-history.json +408 -0
  64. package/src/sast/.agentic-security/streak.json +20 -0
  65. package/src/sast/cache-poisoning.js +77 -0
  66. package/src/sast/comparison-safety.js +73 -0
  67. package/src/sast/db-taint.js +54 -0
  68. package/src/sast/graphql.js +127 -0
  69. package/src/sast/llm-stored-prompt.js +57 -0
  70. package/src/sast/mutation-xss.js +43 -0
  71. package/src/sast/nosql-injection.js +5 -0
  72. package/src/sast/null-byte-injection.js +76 -0
  73. package/src/sast/redos-nfa.js +338 -0
  74. package/src/sast/sensitive-data-logging.js +73 -0
  75. package/src/sast/weak-password-hash.js +77 -0
  76. package/src/sast/weak-randomness.js +100 -0
  77. package/src/sca/.agentic-security/findings.json +1587 -0
  78. package/src/sca/.agentic-security/last-scan.json +1587 -0
  79. package/src/sca/.agentic-security/last-scan.json.sig +1 -0
  80. package/src/sca/.agentic-security/scan-history.json +36 -0
  81. package/src/sca/.agentic-security/streak.json +21 -0
  82. package/src/sca/llm-function-extract.js +107 -0
  83. package/src/sca/vendor-detect.js +91 -0
package/src/dataflow/.agentic-security/scan-history.json ADDED
@@ -0,0 +1,702 @@
1
+ [
2
+ {
3
+ "timestamp": "2026-05-26T15:54:30.242Z",
4
+ "label": "scan",
5
+ "total": 13,
6
+ "critical": 0,
7
+ "high": 0,
8
+ "medium": 13,
9
+ "low": 0,
10
+ "kev": 0,
11
+ "ids": [
12
+ "ssrf-meta-hardcoded:catalog.js:439",
13
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
14
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
15
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
16
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
17
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
18
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
19
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
20
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
21
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
22
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
23
+ "toctou-fs:incremental.js:50",
24
+ "toctou-fs:incremental.js:68"
25
+ ]
26
+ },
27
+ {
28
+ "timestamp": "2026-05-26T15:59:57.002Z",
29
+ "label": "scan",
30
+ "total": 13,
31
+ "critical": 0,
32
+ "high": 0,
33
+ "medium": 13,
34
+ "low": 0,
35
+ "kev": 0,
36
+ "ids": [
37
+ "ssrf-meta-hardcoded:catalog.js:459",
38
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
39
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
40
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
41
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
42
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
43
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
44
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
45
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
46
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
47
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
48
+ "toctou-fs:incremental.js:50",
49
+ "toctou-fs:incremental.js:68"
50
+ ]
51
+ },
52
+ {
53
+ "timestamp": "2026-05-26T16:16:54.427Z",
54
+ "label": "scan",
55
+ "total": 13,
56
+ "critical": 0,
57
+ "high": 0,
58
+ "medium": 13,
59
+ "low": 0,
60
+ "kev": 0,
61
+ "ids": [
62
+ "ssrf-meta-hardcoded:catalog.js:496",
63
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
64
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
65
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
66
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
67
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
68
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
69
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
70
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
71
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
72
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
73
+ "toctou-fs:incremental.js:50",
74
+ "toctou-fs:incremental.js:68"
75
+ ]
76
+ },
77
+ {
78
+ "timestamp": "2026-05-26T16:42:13.064Z",
79
+ "label": "scan",
80
+ "total": 13,
81
+ "critical": 0,
82
+ "high": 0,
83
+ "medium": 13,
84
+ "low": 0,
85
+ "kev": 0,
86
+ "ids": [
87
+ "ssrf-meta-hardcoded:catalog.js:496",
88
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
89
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
90
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
91
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
92
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
93
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
94
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
95
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
96
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
97
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
98
+ "toctou-fs:incremental.js:50",
99
+ "toctou-fs:incremental.js:68"
100
+ ]
101
+ },
102
+ {
103
+ "timestamp": "2026-05-26T16:42:59.107Z",
104
+ "label": "scan",
105
+ "total": 13,
106
+ "critical": 0,
107
+ "high": 0,
108
+ "medium": 13,
109
+ "low": 0,
110
+ "kev": 0,
111
+ "ids": [
112
+ "ssrf-meta-hardcoded:catalog.js:496",
113
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
114
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
115
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
116
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
117
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
118
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
119
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
120
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
121
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
122
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
123
+ "toctou-fs:incremental.js:50",
124
+ "toctou-fs:incremental.js:68"
125
+ ]
126
+ },
127
+ {
128
+ "timestamp": "2026-05-26T16:46:50.684Z",
129
+ "label": "scan",
130
+ "total": 13,
131
+ "critical": 0,
132
+ "high": 0,
133
+ "medium": 13,
134
+ "low": 0,
135
+ "kev": 0,
136
+ "ids": [
137
+ "ssrf-meta-hardcoded:catalog.js:496",
138
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
139
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
140
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
141
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
142
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
143
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
144
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
145
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
146
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
147
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
148
+ "toctou-fs:incremental.js:50",
149
+ "toctou-fs:incremental.js:68"
150
+ ]
151
+ },
152
+ {
153
+ "timestamp": "2026-05-26T16:47:41.341Z",
154
+ "label": "scan",
155
+ "total": 13,
156
+ "critical": 0,
157
+ "high": 0,
158
+ "medium": 13,
159
+ "low": 0,
160
+ "kev": 0,
161
+ "ids": [
162
+ "ssrf-meta-hardcoded:catalog.js:496",
163
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
164
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
165
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
166
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
167
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
168
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
169
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
170
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
171
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
172
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
173
+ "toctou-fs:incremental.js:50",
174
+ "toctou-fs:incremental.js:68"
175
+ ]
176
+ },
177
+ {
178
+ "timestamp": "2026-05-26T16:48:31.461Z",
179
+ "label": "scan",
180
+ "total": 13,
181
+ "critical": 0,
182
+ "high": 0,
183
+ "medium": 13,
184
+ "low": 0,
185
+ "kev": 0,
186
+ "ids": [
187
+ "ssrf-meta-hardcoded:catalog.js:496",
188
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
189
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
190
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
191
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
192
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
193
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
194
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
195
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
196
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
197
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
198
+ "toctou-fs:incremental.js:50",
199
+ "toctou-fs:incremental.js:68"
200
+ ]
201
+ },
202
+ {
203
+ "timestamp": "2026-05-26T17:02:35.530Z",
204
+ "label": "scan",
205
+ "total": 13,
206
+ "critical": 0,
207
+ "high": 0,
208
+ "medium": 13,
209
+ "low": 0,
210
+ "kev": 0,
211
+ "ids": [
212
+ "ssrf-meta-hardcoded:catalog.js:496",
213
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
214
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
215
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
216
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
217
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
218
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
219
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
220
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
221
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
222
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
223
+ "toctou-fs:incremental.js:50",
224
+ "toctou-fs:incremental.js:68"
225
+ ]
226
+ },
227
+ {
228
+ "timestamp": "2026-05-26T17:05:59.505Z",
229
+ "label": "scan",
230
+ "total": 13,
231
+ "critical": 0,
232
+ "high": 0,
233
+ "medium": 13,
234
+ "low": 0,
235
+ "kev": 0,
236
+ "ids": [
237
+ "ssrf-meta-hardcoded:catalog.js:496",
238
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
239
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
240
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
241
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
242
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
243
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
244
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
245
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
246
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
247
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
248
+ "toctou-fs:incremental.js:50",
249
+ "toctou-fs:incremental.js:68"
250
+ ]
251
+ },
252
+ {
253
+ "timestamp": "2026-05-26T17:11:46.314Z",
254
+ "label": "scan",
255
+ "total": 13,
256
+ "critical": 0,
257
+ "high": 0,
258
+ "medium": 13,
259
+ "low": 0,
260
+ "kev": 0,
261
+ "ids": [
262
+ "ssrf-meta-hardcoded:catalog.js:496",
263
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
264
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
265
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
266
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
267
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
268
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
269
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
270
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
271
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
272
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
273
+ "toctou-fs:incremental.js:50",
274
+ "toctou-fs:incremental.js:68"
275
+ ]
276
+ },
277
+ {
278
+ "timestamp": "2026-05-27T00:47:42.438Z",
279
+ "label": "scan",
280
+ "total": 13,
281
+ "critical": 0,
282
+ "high": 0,
283
+ "medium": 13,
284
+ "low": 0,
285
+ "kev": 0,
286
+ "ids": [
287
+ "ssrf-meta-hardcoded:catalog.js:505",
288
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
289
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
290
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
291
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
292
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
293
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
294
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
295
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
296
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
297
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
298
+ "toctou-fs:incremental.js:50",
299
+ "toctou-fs:incremental.js:68"
300
+ ]
301
+ },
302
+ {
303
+ "timestamp": "2026-05-27T00:49:00.083Z",
304
+ "label": "scan",
305
+ "total": 13,
306
+ "critical": 0,
307
+ "high": 0,
308
+ "medium": 13,
309
+ "low": 0,
310
+ "kev": 0,
311
+ "ids": [
312
+ "ssrf-meta-hardcoded:catalog.js:508",
313
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
314
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
315
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
316
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
317
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
318
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
319
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
320
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
321
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
322
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
323
+ "toctou-fs:incremental.js:50",
324
+ "toctou-fs:incremental.js:68"
325
+ ]
326
+ },
327
+ {
328
+ "timestamp": "2026-05-27T00:52:13.881Z",
329
+ "label": "scan",
330
+ "total": 13,
331
+ "critical": 0,
332
+ "high": 0,
333
+ "medium": 13,
334
+ "low": 0,
335
+ "kev": 0,
336
+ "ids": [
337
+ "ssrf-meta-hardcoded:catalog.js:515",
338
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
339
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
340
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
341
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
342
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
343
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
344
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
345
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
346
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
347
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
348
+ "toctou-fs:incremental.js:50",
349
+ "toctou-fs:incremental.js:68"
350
+ ]
351
+ },
352
+ {
353
+ "timestamp": "2026-05-27T00:56:08.313Z",
354
+ "label": "scan",
355
+ "total": 13,
356
+ "critical": 0,
357
+ "high": 0,
358
+ "medium": 13,
359
+ "low": 0,
360
+ "kev": 0,
361
+ "ids": [
362
+ "ssrf-meta-hardcoded:catalog.js:527",
363
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
364
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
365
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
366
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
367
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
368
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
369
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
370
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
371
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
372
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
373
+ "toctou-fs:incremental.js:50",
374
+ "toctou-fs:incremental.js:68"
375
+ ]
376
+ },
377
+ {
378
+ "timestamp": "2026-05-27T00:57:22.450Z",
379
+ "label": "scan",
380
+ "total": 13,
381
+ "critical": 0,
382
+ "high": 0,
383
+ "medium": 13,
384
+ "low": 0,
385
+ "kev": 0,
386
+ "ids": [
387
+ "ssrf-meta-hardcoded:catalog.js:538",
388
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
389
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
390
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
391
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
392
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
393
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
394
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
395
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
396
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
397
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
398
+ "toctou-fs:incremental.js:50",
399
+ "toctou-fs:incremental.js:68"
400
+ ]
401
+ },
402
+ {
403
+ "timestamp": "2026-05-27T02:34:32.799Z",
404
+ "label": "scan",
405
+ "total": 13,
406
+ "critical": 0,
407
+ "high": 0,
408
+ "medium": 13,
409
+ "low": 0,
410
+ "kev": 0,
411
+ "ids": [
412
+ "ssrf-meta-hardcoded:catalog.js:538",
413
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
414
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
415
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
416
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
417
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
418
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
419
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
420
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
421
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
422
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
423
+ "toctou-fs:incremental.js:50",
424
+ "toctou-fs:incremental.js:68"
425
+ ]
426
+ },
427
+ {
428
+ "timestamp": "2026-05-27T02:44:28.731Z",
429
+ "label": "scan",
430
+ "total": 13,
431
+ "critical": 0,
432
+ "high": 0,
433
+ "medium": 13,
434
+ "low": 0,
435
+ "kev": 0,
436
+ "ids": [
437
+ "ssrf-meta-hardcoded:catalog.js:538",
438
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
439
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
440
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
441
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
442
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
443
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
444
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
445
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
446
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
447
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
448
+ "toctou-fs:incremental.js:50",
449
+ "toctou-fs:incremental.js:68"
450
+ ]
451
+ },
452
+ {
453
+ "timestamp": "2026-05-27T02:46:28.817Z",
454
+ "label": "scan",
455
+ "total": 13,
456
+ "critical": 0,
457
+ "high": 0,
458
+ "medium": 13,
459
+ "low": 0,
460
+ "kev": 0,
461
+ "ids": [
462
+ "ssrf-meta-hardcoded:catalog.js:538",
463
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
464
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
465
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
466
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
467
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
468
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
469
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
470
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
471
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
472
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
473
+ "toctou-fs:incremental.js:50",
474
+ "toctou-fs:incremental.js:68"
475
+ ]
476
+ },
477
+ {
478
+ "timestamp": "2026-05-27T02:51:52.901Z",
479
+ "label": "scan",
480
+ "total": 13,
481
+ "critical": 0,
482
+ "high": 0,
483
+ "medium": 13,
484
+ "low": 0,
485
+ "kev": 0,
486
+ "ids": [
487
+ "ssrf-meta-hardcoded:catalog.js:538",
488
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
489
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
490
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
491
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
492
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
493
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
494
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
495
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
496
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
497
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
498
+ "toctou-fs:incremental.js:50",
499
+ "toctou-fs:incremental.js:68"
500
+ ]
501
+ },
502
+ {
503
+ "timestamp": "2026-05-27T03:01:05.846Z",
504
+ "label": "scan",
505
+ "total": 13,
506
+ "critical": 0,
507
+ "high": 0,
508
+ "medium": 13,
509
+ "low": 0,
510
+ "kev": 0,
511
+ "ids": [
512
+ "ssrf-meta-hardcoded:catalog.js:538",
513
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
514
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
515
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
516
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
517
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
518
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
519
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
520
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
521
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
522
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
523
+ "toctou-fs:incremental.js:50",
524
+ "toctou-fs:incremental.js:68"
525
+ ]
526
+ },
527
+ {
528
+ "timestamp": "2026-05-27T03:14:22.409Z",
529
+ "label": "scan",
530
+ "total": 13,
531
+ "critical": 0,
532
+ "high": 0,
533
+ "medium": 13,
534
+ "low": 0,
535
+ "kev": 0,
536
+ "ids": [
537
+ "ssrf-meta-hardcoded:catalog.js:538",
538
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
539
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
540
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
541
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
542
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
543
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
544
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
545
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
546
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
547
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
548
+ "toctou-fs:incremental.js:50",
549
+ "toctou-fs:incremental.js:68"
550
+ ]
551
+ },
552
+ {
553
+ "timestamp": "2026-05-27T09:06:49.555Z",
554
+ "label": "scan",
555
+ "total": 13,
556
+ "critical": 0,
557
+ "high": 0,
558
+ "medium": 13,
559
+ "low": 0,
560
+ "kev": 0,
561
+ "ids": [
562
+ "ssrf-meta-hardcoded:catalog.js:538",
563
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
564
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
565
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
566
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
567
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
568
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
569
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
570
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
571
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
572
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
573
+ "toctou-fs:incremental.js:50",
574
+ "toctou-fs:incremental.js:68"
575
+ ]
576
+ },
577
+ {
578
+ "timestamp": "2026-05-27T09:07:34.195Z",
579
+ "label": "scan",
580
+ "total": 13,
581
+ "critical": 0,
582
+ "high": 0,
583
+ "medium": 13,
584
+ "low": 0,
585
+ "kev": 0,
586
+ "ids": [
587
+ "ssrf-meta-hardcoded:catalog.js:538",
588
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
589
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
590
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
591
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
592
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
593
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
594
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
595
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
596
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
597
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
598
+ "toctou-fs:incremental.js:50",
599
+ "toctou-fs:incremental.js:68"
600
+ ]
601
+ },
602
+ {
603
+ "timestamp": "2026-05-27T09:27:55.033Z",
604
+ "label": "scan",
605
+ "total": 13,
606
+ "critical": 0,
607
+ "high": 0,
608
+ "medium": 13,
609
+ "low": 0,
610
+ "kev": 0,
611
+ "ids": [
612
+ "ssrf-meta-hardcoded:catalog.js:538",
613
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
614
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
615
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
616
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
617
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
618
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
619
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
620
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
621
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
622
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
623
+ "toctou-fs:incremental.js:50",
624
+ "toctou-fs:incremental.js:68"
625
+ ]
626
+ },
627
+ {
628
+ "timestamp": "2026-05-27T09:28:46.801Z",
629
+ "label": "scan",
630
+ "total": 13,
631
+ "critical": 0,
632
+ "high": 0,
633
+ "medium": 13,
634
+ "low": 0,
635
+ "kev": 0,
636
+ "ids": [
637
+ "ssrf-meta-hardcoded:catalog.js:538",
638
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
639
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
640
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
641
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
642
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
643
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
644
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
645
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
646
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
647
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
648
+ "toctou-fs:incremental.js:50",
649
+ "toctou-fs:incremental.js:68"
650
+ ]
651
+ },
652
+ {
653
+ "timestamp": "2026-05-27T09:29:26.721Z",
654
+ "label": "scan",
655
+ "total": 13,
656
+ "critical": 0,
657
+ "high": 0,
658
+ "medium": 13,
659
+ "low": 0,
660
+ "kev": 0,
661
+ "ids": [
662
+ "ssrf-meta-hardcoded:catalog.js:538",
663
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
664
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
665
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
666
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
667
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
668
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
669
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
670
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
671
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
672
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
673
+ "toctou-fs:incremental.js:50",
674
+ "toctou-fs:incremental.js:68"
675
+ ]
676
+ },
677
+ {
678
+ "timestamp": "2026-05-27T09:30:02.365Z",
679
+ "label": "scan",
680
+ "total": 13,
681
+ "critical": 0,
682
+ "high": 0,
683
+ "medium": 13,
684
+ "low": 0,
685
+ "kev": 0,
686
+ "ids": [
687
+ "ssrf-meta-hardcoded:catalog.js:538",
688
+ "ssrf-meta-hardcoded:exploit-prover.js:33",
689
+ "struct:incremental.js:203:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
690
+ "struct:incremental.js:204:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
691
+ "struct:incremental.js:209:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
692
+ "struct:incremental.js:220:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
693
+ "struct:incremental.js:223:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
694
+ "struct:incremental.js:50:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
695
+ "struct:incremental.js:51:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
696
+ "struct:incremental.js:68:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
697
+ "struct:incremental.js:69:Synchronous_Blocking_I/O_(DoS_Risk_in_Server_Context)",
698
+ "toctou-fs:incremental.js:50",
699
+ "toctou-fs:incremental.js:68"
700
+ ]
701
+ }
702
+ ]